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DETAILED ACTION 

1. Claims 1-22 are pending. 

2. This is a Final rejection. 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to 
a person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

3. Claims 1-8, 10-20, and 22 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Wright et al. (US 6,084,969) in view of Ellison (US 6,073,237). 

As per claim 1: 

Wright, et al. disclose a method for encrypting an original document for 
distribution to a selected recipient chosen from a plurality of possible recipients, 
comprising the steps of: 

generating a session key based on a random number [col.11, lines 46-50] 
privately maintained by only the owner, including the encryptor [col.9, lines 51-52] A of 
the original document; [col.5, lines 2-4 and col.7, lines 10-11] 
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encrypting the original document with the session key to create an encrypted 
document; [col. 5, lines 21-22 and col.7, lines 12-13] 

generating a proxy key based on a public key [col. 10, lines 26-28 and col.11, 
line 11] corresponding to the selected recipient; and [col. 11, lines 65-67 and col. 14, 
lines 35-36] 

transforming the encrypted document with a proxy key to create a transformed 
document [col. 14, lines 65-67], wherein the encrypted document remains in an 
encrypted state [col. 12, lines 55-56] during the transformation to the transformed 
document, [col. 13, lines 49-65 and col. 14, lines 16-30; where Wright discloses 
alternative methods for secure message transmission. There is a method that 
decrypts and then re-encrypts the message and there is the alternative method of 
a straight through process of the encryption and the re-encryption process 
throughout the transformation of the encrypted document where the encryption 
remains encrypted.] 

It is obvious that Wright disclose the session key is maintained by "only" the 
owner of the original document (see Wright on col. 3, line 51 and col.9, lines 51-52). 
However, Wright did not fully disclose the element "only" by the owner. 

Ellison does fully disclose the private key is known only to the user (see Ellison 
on col.1, lines 20-26). Therefore, it would have been obvious of ordinary skills in the art 
to combine the teaching of Wright with Ellison that the private or session key is known 
and maintained by only the owner in order to secure the transactions of the user. 
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As per claim 2: See Wright on col.14, lines 65-67; discusses transforming the 
transformed document to the selected recipient. 

As per claim 3: See Wright on col. 12, lines 5-1 and col.14, lines 41-42; discusses 
recovering the session key from the transformed document and decrypting the 
transformed document with the session key to recover the original document. 
As per claim 4: See Wright on col. 13, line 51; discusses applying the private key 
corresponding to the selected recipient. 

As per claim 5: See Wright on col.5, lines 45-56; discusses an encryption step is a 
combination of a symmetric private key encryption scheme and an asymmetric public 
key encryption scheme. 

As per claim 6: See Wright on col.5, lines 45-56; discusses the asymmetric public 
key encryption scheme is based on the EIGamal encryption scheme. 
As per claim 7: See Wright on col.7, lines 3-5 and col.11, lines 10-11; discusses 
the encrypted document comprises a first portion representative of the original 
document encrypted via the symmetric private key encryption scheme using the session 
key, and a second portion representative of the session key encrypted using an owner's 
private key according to the asymmetric public key encryption scheme (col.7, lines 20- 
21). 

As per claim 8: 

Wright discloses the original document is distributed to the selected recipient 
through at least one additional intermediate grantor by repeating the following steps for 
each additional intermediate grantor: 
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generating a new proxy key based on the intermediate grantor's public key; and 
[col. 14, lines 65-67] 

transforming the encrypted document with the new proxy key to create a 
transformed document customized for the intermediate grantor, [col. 13, lines 50-51] 
As per claim 10: See Wright on col.7, lines 3-5 and col.11, lines 10-11; discusses 
the encrypted document comprises a first portion representative of the original 
document encrypted via the symmetric private-key encrypted scheme using the session 
key, and a second portion representative of the session key encrypted using an owner's 
private key according to the asymmetric public-key encryption scheme. 
As per claim 11: See Wright on col.5, lines 45-56; discusses encrypted with the 
modified EIGamal encryption scheme. 

As per claim 12: See Wright on col., lines; discusses generating a session key 
[col.11, lines 46-50], encrypting the original document [col.5, lines 21-22 and col.7, 
lines 12-13], generating a proxy key [col. 10, lines 26-28 and col.11, line 11], 
transforming the encrypted document are performed by the grantor [col. 12, lines 55-56 
and col. 14, lines 65-67] 

As per claim 13: 

Wright, et al. disclose a system operable to encrypt an original document for 
distribution to a selected recipient chosen from a plurality of possible recipients, 
comprising: 
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a session key generation system that generates a session key based on a 
random number [col. 11, lines 46-50] privately maintained by only the owner, including 
the encryptor [col.9, lines 51-52], of the original document; [col.5, lines 2-4 and col.7, 
lines 10-11] 

an encryption system that encrypts the original document with the session key to 
create an encrypted document; [col.5, lines 21-22 and col.7, lines 12-13] 

a proxy key generation system that generates a proxy key based on a public key 
[col. 10, lines 26-28 and col.11, line 11] corresponding to the selected recipient; and 
[col. 11, lines 65-67 and col. 14, lines 35-36] 

a transformation system that transforms the encrypted document with a proxy 
key to create a transformed document [col. 14, lines 65-67], wherein the encrypted 
document remains in an encrypted state [col. 12, lines 55-56] during the transformation 
to the transformed document, [col. 13, lines 49-65 and col. 14, lines 16-30; where 
Wright discloses alternative methods for secure message transmission. There is 
a method that decrypts and then re-encrypts the message and there is the 
alternative method of a straight through process of the encryption and the re- 
encryption process throughout the transformation of the encrypted document 
where the encryption remains encrypted.] 

It is obvious that Wright disclose the session key is maintained by "only" the 
owner of the original document (see Wright on col.3, line 51 and col.9, lines 51-52). 
However, Wright did not fully disclose the element "only" by the owner. 
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Ellison does fully disclose the private key is known only to the user (see Ellison 
on col.1 , lines 20-26). Therefore, it would have been obvious of ordinary skills in the art 
to combine the teaching of Wright with Ellison that the private or session key is known 
and maintained by only the owner in order to secure the transactions of the user. 
As per claim 14: See Wright on col. 14, lines 65-67; discusses transmitting system 
that transmits the transforming the transformed document to the selected recipient. 
As per claim 15: See Wright on col. 12, lines 5-1 and col. 14, lines 41-42; discusses 
a recovering system that recovers the session key from the transformed document and 
decrypting system that decrypts the transformed document with the session key to 
recover the original document. 

As per claim 16: See Wright on col. 13, line 51; discusses the recovery of the session 
key is performed by applying the private key corresponding to the selected recipient. 
As per claim 17: See Wright on col.5, lines 45-56; discusses the encryption is 
performed with a combination of a symmetric private key encryption scheme and an 
asymmetric public key encryption scheme. 

As per claim 18: See Wright on col.5, lines 45-56; discusses the asymmetric public 
key encryption scheme is based on the EIGamal encryption scheme. 
As per claim 19: See Wright on col.7, lines 3-5 and col.11, lines 10-11; discusses 
the encrypted document comprises a first portion representative of the original 
document encrypted via the symmetric private key encryption scheme using the session 
key, and a second portion representative of the session key encrypted using an owner's 
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private key according to the asymmetric public key encryption scheme (col.7, lines 20- 
21). 

As per claim 20: See Wright col. 14, lines 65-67 and col. 13, lines 50-51; discloses 
the original document is distributed to the selected recipient through at least one 
additional intermediate grantor by repeating the following steps for each additional 
intermediate grantor by using the proxy key generation system to generate a new proxy 
key based on the intermediate grantor's public key and using the transformation system 
to transform the encrypted document with the new proxy key to create a transformed 
document customized for the intermediate grantor. 

As per claim 22: See Wright on col.5, lines 45-56; discusses encrypted with the 
modified EIGamal encryption scheme. 
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Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to 
a person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

4. Claims 9 and 21 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Wright et al. (US 6,084,969) and Ellison (US 6,073,237), and in further view of 
Irish Times "Encryption Technology to Thwart Computer Hackers System Should 
Protect Security of E-Commerce" (City Edition). 

As per claim 9: 

Wright disclose a method for encrypting an original document for distribution to a 
selected recipient chosen from a plurality of possible recipients comprising generating a 
session key based on a random number [col.11, lines 46-50] privately maintained by 
only the owner, including the encryptor [col.9, lines 51-52], of the original document 
[col.5, lines 2-4 and col.7, lines 10-11], encrypting the original document with the 
session key to create an encrypted document [col.5, lines 21-22 and col.7, lines 12- 
13], generating a proxy key based on a public key [col. 10, lines 26-28 and col.11, line 
11] corresponding to the selected recipient, and [col.11, lines 65-67 and col. 14, lines 
35-36] 

However, Wright did not include the Cramer-Shoup encryption scheme. 
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The Irish Times disclosed in its article "Encryption Technology to Thwart 
Computer Hackers System Should Protect Security of E-Commerce" a Cramer-Shoup 
encryption scheme [paragraph 4] where this encryption was developed by 
mathematicians from IBM and Swiss Federal Institute of Technology to have created an 
unbreakable protection for computer data [paragraph 2]. Cramer-Shoup method 
thwarts attacks of decoding encrypted messages passing through the network with 
bogus messages by adding another series of calculations which ensure the server leaks 
no information when responding to the bogus text [paragraph 6]. 

Therefore, it would have been obvious for a person of ordinary skills in the art at 
the time of the invention to combine the teachings of Wright & Ellison with Cramer- 
Shoup encryption scheme as taught by The Irish Times because this method thwarts 
attacks of decoding encrypted messages passing through the network with bogus 
messages by adding another series of calculations which ensure the server leaks no 
information when responding to the bogus text. 
As per claim 21: 

Wright disclose a method for encrypting an original document for distribution to a 
selected recipient chosen from a plurality of possible recipients comprising generating a 
session key based on a random number [col.11, lines 46-50] privately maintained by 
only the owner, including the encryptor [col.9, lines 51-52], of the original document 
[col.5, lines 2-4 and col.7, lines 10-11], encrypting the original document with the 
session key to create an encrypted document [col.5, lines 21-22 and col.7, lines 12- 
13], generating a proxy key based on a public key [col. 10, lines 26-28 and col.11, line 
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11] corresponding to the selected recipient, and [col.11, lines 65-67 and col. 14, lines 
35-36] 

However, Wright did not include the Cramer-Shoup encryption scheme. 

The Irish Times disclosed in its article "Encryption Technology to Thwart 
Computer Hackers System Should Protect Security of E-Commerce" a Cramer-Shoup 
encryption scheme [paragraph 4] where this encryption was developed by 
mathematicians from IBM and Swiss Federal Institute of Technology to have created an 
unbreakable protection for computer data [paragraph 2]. Cramer-Shoup method 
thwarts attacks of decoding encrypted messages passing through the network with 
bogus messages by adding another series of calculations, which ensure the server, 
leaks no information when responding to the bogus text [paragraph 6]. 
Therefore, it would have been obvious for a person of ordinary skills in the art at the 
time of the invention to combine the teachings of Wright & Ellison with Cramer-Shoup 
encryption scheme as taught by The Irish Times because this method thwarts attacks of 
decoding encrypted messages passing through the network with bogus messages by 
adding another series of calculations which ensure the server leaks no information 
when responding to the bogus text. 
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Response to Amendment 
5. Applicant's arguments filed February 10, 2006 have been fully considered 
but they are not persuasive. 

Wright discloses the encrypted document remains in an encrypted state during 
the transformation to the transformed document [col.13, lines 49-65 and col. 14, lines 
16-30] where Wright discloses alternative methods for secure message transmission. 
The amended claims reads similar to the previous now cancelled limitation "no cleartext 
document is revealed during the transformation", which reads that the document is 
encrypted during the transformation that does not have any unencrypted or decrypted 
text document. There is a method that decrypts and then re-encrypts and there is the 
alternative method of a straight through process of the encryption and the re-encryption 
process throughout the transformation of the encrypted document where the encryption 
remains encrypted. The discussion regarding decrypting the message and re-encrypted 
the message (on col.4, line 65-col,5, line 2), is merely another method in Wright's 
invention. Wright also teaches the method of encrypting the message and a second 
encryption for the message without decrypting the message during the transformation 
[col. 12, lines 55-56 and col.13, lines 2-9]. 

Claims 1 and 13 claims transforming the encrypted document with a proxy key to 
create a transformed document where transform and document are broad limitations. 
Transforming can reasonably be the process of converting one type of data into another 
type of data or changing the information of the message into another form where can be 
both of these two interpretations are to create a transformed document. A document 
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can reasonably be a file or a message that contains data or information where within the 
document, the information can be identification information, private and/or public key 
information, authentication information, or header information. Thus, Wright teaches 
transforming the encrypted document with the proxy key to create a transformed 
document [col. 13, lines 49-65 and col.14, lines 16-30], 



Conclusion 

6. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension 
of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire 
THREE MONTHS from the mailing date of this action. In the event a first reply 
is filed within TWO MONTHS of the mailing date of this final action and the 
advisory action is not mailed until after the end of the THREE-MONTH 
shortened statutory period, then the shortened statutory period will expire on 
the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1. 136(a) will be calculated from the mailing date of the advisory action. In 
no event, however, will the statutory period for reply expire later than SIX 
MONTHS from the mailing date of this final action. 
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Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to LEYNNA T. HA whose telephone 
number is (571) 272-3851. The examiner can normally be reached on Monday 
- Thursday (7:00 - 5:00PM). 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached on (571) 272-3859. The fax 
phone number for the organization where this application or proceeding is 
assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see 
http://pair-direct.uspto.gov. Should you have questions on access to the 
Private PAIR system, contact the Electronic Business Center (EBC) at 866-217- 
9197 (toll-free). 
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